Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa
File:                     323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa (raw, json)
Hash identifier:          tKZhqSBYXOyTjXlsMrrt99Ctd9P4ugPy4q7cOA40XSs=
Subject key identifier:   92:E2:25:02:69:3A:09:70:9F:A8:7B:AE:E4:94:90:06:02:C1:15:87
Certificate issuer:       /CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
Certificate serial:       0D671E175C0025D2C15D650B93B19D761AE7360D
Authority key identifier: 18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa
Signing time:             Fri 25 Oct 2024 02:50:01 +0000
ROA not before:           Fri 25 Oct 2024 02:45:01 +0000
ROA not after:            Fri 24 Oct 2025 02:50:01 +0000
asID:                     273196
IP address blocks:        2803:2650:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:67:1e:17:5c:00:25:d2:c1:5d:65:0b:93:b1:9d:76:1a:e7:36:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D
        Validity
            Not Before: Oct 25 02:45:01 2024 GMT
            Not After : Oct 24 02:50:01 2025 GMT
        Subject: CN=92E22502693A09709FA87BAEE494900602C11587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:51:f1:38:cc:6d:1f:53:39:90:ba:11:f4:
                    b5:8d:cc:32:80:6d:87:32:fa:b7:e5:7a:d6:12:95:
                    e7:1e:43:f3:50:8f:19:6a:64:32:9d:ec:cf:ab:5b:
                    5d:25:19:7d:b6:5a:75:c2:67:b1:02:37:42:14:36:
                    c9:32:db:cb:2e:21:f2:9d:bc:c2:04:c1:58:ef:14:
                    49:45:ad:4c:c8:a7:72:7d:5c:17:2f:04:8d:69:03:
                    78:dc:3f:a8:de:de:cf:24:99:67:b6:12:df:a5:a7:
                    cd:f6:7a:27:00:9b:4c:5a:b0:11:90:fe:11:51:7d:
                    5e:3a:82:db:6b:00:03:9b:b5:db:60:9e:2a:a7:ce:
                    25:fd:a0:96:7f:3c:e2:b5:66:ae:7b:f2:07:18:2b:
                    0f:39:52:32:fb:24:ee:fc:1a:c9:11:31:10:e4:c2:
                    a1:d5:ca:45:c6:ce:13:07:b9:2d:83:41:39:26:4f:
                    05:7f:c3:04:58:be:47:02:7a:42:4f:2f:02:91:6e:
                    55:fb:1e:2c:56:3b:5d:f0:56:49:73:d2:c1:5d:3a:
                    de:d9:4d:f8:23:58:16:21:2b:74:5c:9c:b4:c3:04:
                    62:d6:7b:22:30:24:61:57:10:f8:25:8e:d9:0f:8a:
                    0b:aa:80:70:ba:7c:b4:83:e3:f5:f1:13:b3:54:71:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:25:02:69:3A:09:70:9F:A8:7B:AE:E4:94:90:06:02:C1:15:87
            X509v3 Authority Key Identifier:
                keyid:18:C3:12:9A:8D:9D:B6:FD:8F:7C:8A:48:4A:2B:ED:22:63:65:4C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18C3129A8D9DB6FD8F7C8A484A2BED2263654C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6D478A3899FA78E4D461B08106B020DE602C9E2F18411B3EAB1C69AB2F0057D/0/323830333a323635303a3930303a3a2f34302d3430203d3e20323733313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2650:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:7d:83:25:16:66:80:c7:66:93:a9:54:b6:63:f1:fe:3c:8f:
         35:4a:30:1e:f7:29:f9:45:1e:44:28:3e:46:2d:50:52:6f:ac:
         8c:23:2b:0f:f0:0e:fa:48:71:2e:0e:50:ce:93:b0:9d:1c:7e:
         ce:bc:8e:ad:77:34:35:4a:96:d9:33:ad:11:56:85:60:c3:c2:
         4e:c1:2e:ce:b1:3d:aa:b0:ad:c4:a7:d5:1e:68:5c:78:59:66:
         fc:7e:62:0d:3e:71:e6:3c:41:5c:6d:d1:ef:fb:90:0f:cf:67:
         00:19:ec:bb:71:42:64:f8:53:d2:d8:e2:ec:7b:9d:01:7c:74:
         62:f5:3a:5c:b5:a7:2e:2c:3e:93:88:2e:e4:94:87:f5:eb:8a:
         04:d3:ae:d5:f6:a5:65:1e:2a:a0:b3:73:71:4c:7d:60:fe:38:
         d7:9c:ca:65:0c:39:c5:ab:62:33:62:50:8f:9e:34:2a:c5:60:
         c2:27:49:42:2b:7e:a9:59:b1:32:d4:07:1c:35:d1:74:fd:f1:
         ed:f4:50:93:46:1c:b1:a1:a8:3d:dc:c9:1e:ce:7f:0a:ea:b6:
         b8:3f:42:b4:72:9e:b0:5a:70:13:75:34:92:88:1a:d3:62:4c:
         82:02:cb:b2:30:c4:af:d7:27:35:97:1d:d1:0c:4b:28:9e:b7:
         85:d8:d9:78
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUDWceF1wAJdLBXWULk7GddhrnNg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMzEyOUE4RDlEQjZGRDhGN0M4QTQ4NEEyQkVEMjI2
MzY1NEMxRDAeFw0yNDEwMjUwMjQ1MDFaFw0yNTEwMjQwMjUwMDFaMDMxMTAvBgNV
BAMTKDkyRTIyNTAyNjkzQTA5NzA5RkE4N0JBRUU0OTQ5MDA2MDJDMTE1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4elHxOMxtH1M5kLoR9LWNzDKA
bYcy+rfletYSleceQ/NQjxlqZDKd7M+rW10lGX22WnXCZ7ECN0IUNsky28suIfKd
vMIEwVjvFElFrUzIp3J9XBcvBI1pA3jcP6je3s8kmWe2Et+lp832eicAm0xasBGQ
/hFRfV46gttrAAObtdtgniqnziX9oJZ/POK1Zq578gcYKw85UjL7JO78GskRMRDk
wqHVykXGzhMHuS2DQTkmTwV/wwRYvkcCekJPLwKRblX7HixWO13wVklz0sFdOt7Z
TfgjWBYhK3RcnLTDBGLWeyIwJGFXEPgljtkPiguqgHC6fLSD4/XxE7NUcdMLAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUkuIlAmk6CXCfqHuu5JSQBgLBFYcwHwYDVR0j
BBgwFoAUGMMSmo2dtv2PfIpISivtImNlTB0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkQ0NzhBMzg5OUZBNzhFNEQ0NjFCMDgxMDZCMDIwREU2
MDJDOUUyRjE4NDExQjNFQUIxQzY5QUIyRjAwNTdELzAvMThDMzEyOUE4RDlEQjZG
RDhGN0M4QTQ4NEEyQkVEMjI2MzY1NEMxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOEMzMTI5QThEOURCNkZEOEY3
QzhBNDg0QTJCRUQyMjYzNjU0QzFELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZENDc4QTM4OTlGQTc4RTRENDYxQjA4MTA2QjAyMERFNjAyQzlFMkYx
ODQxMUIzRUFCMUM2OUFCMkYwMDU3RC8wLzMyMzgzMDMzM2EzMjM2MzUzMDNhMzkz
MDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNzMzMzEzOTM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAMmUAkwDQYJKoZIhvcNAQELBQADggEBAKh9gyUWZoDHZpOpVLZj8f48jzVK
MB73KflFHkQoPkYtUFJvrIwjKw/wDvpIcS4OUM6TsJ0cfs68jq13NDVKltkzrRFW
hWDDwk7BLs6xPaqwrcSn1R5oXHhZZvx+Yg0+ceY8QVxt0e/7kA/PZwAZ7LtxQmT4
U9LY4ux7nQF8dGL1Oly1py4sPpOILuSUh/XrigTTrtX2pWUeKqCzc3FMfWD+ONec
ymUMOcWrYjNiUI+eNCrFYMInSUIrfqlZsTLUBxw10XT98e30UJNGHLGhqD3cyR7O
fwrqtrg/QrRynrBacBN1NJKIGtNiTIICy7IwxK/XJzWXHdEMSyiet4XY2Xg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org